At THE GAME KITCHEN SL, we care about privacy and transparency. Below, we detail the personal data processing we carry out, as well as all related information.

Processing of job candidate data Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Conduct personnel selection processes.
• Legal basis: Execution of a contract or pre-contractual measures.
• Recipients: Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage the received CVs and conduct personnel selection processes, interviews, and other necessary procedures to find the best possible candidate for a specific job position. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • Two years from the last interaction.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Execution of a contract or pre-contractual measures: Management of CVs submitted by the candidate to conduct personnel selection processes to find the best possible candidate for a specific job position. (GDPR art. 6.1.b).

5. To whom will your data be communicated?

1. • Data will not be transferred to third parties, except for legal obligations.

6. Transfers of data to third countries

1. • The following data transfers to third countries are planned:

1. • • Google, for the purpose of hosting storage in Google Drive Cloud. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Heliom inc. 190 rue Dorchester, studio 50.5 Quebec QC, Canada G1K 5Y9, for the purpose of hosting webmail from MISSIVE. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: Commission Decision 2002/2/EC.

1. • • Mega Limited (New Zealand company number 4136598), for the purpose of hosting data storage in the cloud. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: Commission Decision 2013/65/EU of December 19, 2012.

1. • • Microsoft, for the purpose of hosting Office 365 and One Drive storage. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting the data controller.

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The data subject.

Processing of customer data Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Provide the requested services and send promotional communications.
• Legal basis: Execution of a contract or pre-contractual measures. Legitimate interest of the data controller.
• Recipients: Data transfers are planned to: Tax Administration; Financial entities. Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage the administrative, accounting, and tax aspects of the requested services, as well as to send promotional communications about our products and services. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept as long as the interested party does not request their deletion, and, where appropriate, for the years necessary to comply with legal obligations.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Execution of a contract or pre-contractual measures: Fiscal, accounting, and administrative management of customers. (GDPR art. 6.1.b).

1. • • Legitimate interest of the data controller: Sending promotional communications, including by electronic means. (GDPR Recital 47, LSSICE art. 21.2).

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Tax Administration, for the purpose of complying with legal obligations (legal requirement).

1. • • Financial entities, for the purpose of issuing the corresponding receipts (contractual requirement).

Processing of data from parties involved in the internal whistleblowing channel Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Management of the internal whistleblowing channel
• Legal basis: Public interest mission. Compliance with a legal obligation. Consent of the data subject.
• Recipients: Data transfers are planned to: Law enforcement agencies; Judicial bodies; Public Prosecutor’s Office. Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting legal@aselio.es or C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla).
• Source: From the complaint filed by the interested parties who have a labor, commercial, or service provision relationship with the entity.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage the internal whistleblowing channel and protect individuals who report regulatory violations and anti-corruption efforts. The purpose is to inform the responsible party of acts or behaviors that occurred within the entity or caused by third parties contracting with it, which may be contrary to applicable general or sectoral regulations. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept for the time necessary to decide on the appropriateness of initiating an investigation of the reported facts. The maximum period will be three months from its entry into the system, unless the purpose of its conservation serves as evidence of the functioning of the prevention model. In this case, the data will be kept anonymized. (LOPDGDD art. 24.4)

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Public interest mission: Risk control of non-compliance within the organization; (Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights [Preamble V]). Processing of special categories of data contained in the information about the violation (Law 2/2023, of February 20, regulating the protection of persons who report regulatory violations and anti-corruption efforts, art. 30 and GDPR art. 9.2.g).

1. • • Compliance with a legal obligation: Directive (EU) 2019/1937 of the European Parliament and of the Council of October 23, 2019, on the protection of persons who report breaches of Union law (art. 8; obligation to establish internal reporting channels). Law 2/2023, of February 20, regulating the protection of persons who report regulatory violations and anti-corruption efforts.

1. • • Consent of the data subject: For the conservation and recording of complaints made through telephone lines and voice messaging systems with recording. Also for recording the personal meeting requested with the entity for the purpose of reporting. (Directive (EU) 2019/1937; art. 18.2 and 4)

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Law enforcement agencies; Judicial bodies; Public Prosecutor’s Office, for the purpose of reporting the commission of a possible crime (legal requirement).

6. Transfers of data to third countries

1. • The following data transfers to third countries are planned:

1. • • Google, for the purpose of hosting data storage in Google Drive. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Microsoft, for the purpose of hosting Office 365 and One Drive storage. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting legal@aselio.es or C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla).

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The complaint filed by the interested parties who have a labor, commercial, or service provision relationship with the entity.

1. • The categories of data processed are:

1. • • Identification data.

1. • • Commercial information.

1. • • Economic data.

1. • • The following special categories of data are processed: health data.

Processing of data from parties involved in the protocol for the prevention of sexual harassment or harassment based on sex Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Manage the protocol for the prevention of sexual harassment or harassment based on sex
• Legal basis: Compliance with a legal obligation.
• Recipients: Data transfers are planned to: Law enforcement agencies; Judicial bodies; Public Prosecutor’s Office. Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information.
• Source: From the complaint filed by the person who has suffered harassment or other persons.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage the protocol for the prevention of sexual harassment or harassment based on sex; regulation of the procedure, management of the complaint, collection of personal data, and interviews with the affected parties. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be deleted after two years, unless their conservation is necessary to determine possible responsibilities that may arise from claims made by the affected parties.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Compliance with a legal obligation: Organic Law 3/2007, of March 22, for the effective equality of women and men (art. 48); Royal Decree 901/2020, of October 13; Law 31/1995, of November 8, on the prevention of occupational risks (art. 14).

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Law enforcement agencies; Judicial bodies; Public Prosecutor’s Office, for the purpose of reporting the commission of a possible crime (legal requirement).

6. Transfers of data to third countries

1. • The following data transfers to third countries are planned:

1. • • Microsoft, for the purpose of hosting Office 365 and One Drive storage. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The complaint filed by the person who has suffered harassment or other persons.

1. • The categories of data processed are:

1. • • Identification data.

1. • • The following special categories of data are processed: health data.

Processing of data from potential clients and contacts Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Attend to your request and send you promotional communications
• Legal basis: Execution of a contract or pre-contractual measures. Consent of the data subject. Legitimate interest of the data controller.
• Recipients: Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage potential clients who have shown interest in our products and/or services, as well as other commercial contacts and, where appropriate, to send promotional communications, including by electronic means. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept as long as the interested party does not request their deletion.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Execution of a contract or pre-contractual measures: Management of potential clients who have shown interest in our products and/or services. (GDPR, art. 6.1.b).

1. • • Consent of the data subject: Sending promotional communications, including by electronic means. (GDPR, art. 6.1.a, LSSICE art.21).

1. • • Legitimate interest of the data controller: Management of professional contact data (LOPDGDD art.19, GDPR art. 6.1.f).

5. To whom will your data be communicated?

1. • Data will not be transferred to third parties, except for legal obligations.

6. Transfers of data to third countries

1. • The following data transfers to third countries are planned:

1. • • All About Games, Miro, Valve Corporation, Discord, Tyco Integrated Security, 10Web, for the purpose of digital communication channels, IT and marketing consulting, HR management, software developers, web hosting. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission.

1. • • Google, for the purpose of hosting storage in Google Drive. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Heliom inc. 190 rue Dorchester, studio 50.5 Quebec QC, Canada G1K 5Y9, for the purpose of hosting webmail from MISSIVE. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: Commission Decision 2002/2/EC.

1. • • Microsoft, for the purpose of hosting Office 365 and OneDrive storage. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting the data controller.

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The data subject.

Processing of supplier data Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Manage the provision of contracted services
• Legal basis: Execution of a contract or pre-contractual measures. Legitimate interest of the data controller.
• Recipients: Data transfers are planned to: Tax Administration; Financial entities. Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage the fiscal, accounting, and administrative aspects of suppliers as well as professional contact data. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept as long as the interested party does not request their deletion, and, where appropriate, for the years necessary to comply with legal obligations.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Execution of a contract or pre-contractual measures: Manage the administrative, accounting, and fiscal aspects of the contracted services. (GDPR art. 6.1.b).

1. • • Legitimate interest of the data controller: Management of professional contact data. (LOPDGDD art.19, GDPR art. 6.1.f).

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Tax Administration, for the purpose of complying with legal obligations (legal requirement).

1. • • Financial entities, for the purpose of making the corresponding payments (contractual requirement).

6. Transfers of data to third countries

1. • The following data transfers to third countries are planned:

1. • • All About Games, Miro, Valve Corporation, Discord, Tyco Integrated Security, 10Web, for the purpose of digital communication channels, IT and marketing consulting, HR management, software developers, web hosting. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Google, for the purpose of hosting storage in Google Drive Cloud. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Heliom inc. 190 rue Dorchester, studio 50.5 Quebec QC, Canada G1K 5Y9, for the purpose of hosting webmail from MISSIVE. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: Commission Decision 2002/2/EC.

1. • • Mega Limited (New Zealand company number 4136598), for the purpose of hosting data storage in the cloud. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: Commission Decision 2013/65/EU of December 19, 2012.

1. • • Microsoft, for the purpose of hosting Office 365 and One Drive storage. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting the data controller.

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The data subject.

Processing of surveillance data (labor control) Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Control and direction of labor activity
• Legal basis: Execution of a contract or pre-contractual measures.
• Recipients: Data transfers are planned to: Courts and Tribunals.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to control and direct labor activity using the surveillance systems of the data controller. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept for a maximum of 30 days, except for communication to Courts and Tribunals.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Execution of a contract or pre-contractual measures: Royal Decree Law 2/2015, which approves the revised text of the Workers’ Statute Law (art. 20.3); Organic Law 3/2018 on personal data protection and guarantee of digital rights (art. 89).

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Courts and Tribunals, for the purpose of providing images if a labor offense has been committed (legal requirement).

6. Transfers of data to third countries

1. • No data transfers to third countries are planned.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting the data controller.

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The data subject.

Processing of surveillance data (security) Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Ensure the security of people, property, and facilities.
• Legal basis: Public interest mission.
• Recipients: Data transfers are planned to: Where appropriate, law enforcement agencies, as well as Courts and Tribunals.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to ensure the security of people, property, and facilities using surveillance systems. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept for a maximum of 30 days, except for communication to law enforcement agencies and/or Courts and Tribunals.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Public interest mission: Processing necessary for the fulfillment of a mission carried out in the public interest or in the exercise of official authority vested in the data controller (GDPR art. 6.1.e), as stated in the “Guide on the use of video cameras for security and other purposes,” published by the Spanish Data Protection Agency.

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Where appropriate, law enforcement agencies, as well as Courts and Tribunals, for the purpose of providing images if a crime has been committed (legal requirement).

6. Transfers of data to third countries

1. • No data transfers to third countries are planned.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting the data controller.

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The data subject.

Processing of personnel data Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Manage the employment relationship
• Legal basis: Execution of a contract or pre-contractual measures. Compliance with a legal obligation.
• Recipients: Data transfers are planned to: Tax Administration, Social Security and Mutual Insurance; Banks and financial entities; State Foundation for Employment Training (Fundae). Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage personnel; training; occupational risk prevention and health surveillance; payroll preparation, social security, and contributions; workday registration; and, where appropriate, work accidents. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept as long as the employment relationship with the entity is maintained and for the years necessary to comply with legal obligations.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Execution of a contract or pre-contractual measures: Personnel management, training, and qualification. (GDPR art. 6.1.b).

1. • • Compliance with a legal obligation: Occupational risk prevention and health surveillance; payroll preparation, social security, and contributions; workday registration; management of work accidents, where appropriate. (Law 31/1995, of November 8, on Occupational Risk Prevention; Royal Legislative Decree 2/2015, of October 23, approving the revised text of the Workers’ Statute Law; Royal Legislative Decree 8/2015, of October 30, approving the revised text of the General Social Security Law; Royal Decree-Law 8/2019, of March 8, on urgent measures for social protection and the fight against job insecurity in the workday; GDPR arts. 6.1.c and 9.2.b). Royal Decree 902/2020, of October 13, on equal pay between women and men.

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Tax Administration, Social Security, and Mutual Insurance, for the purpose of filing taxes and obligations related to social security (legal requirement).

1. • • Banks and financial entities, for the purpose of making payroll payments (contractual requirement).

1. • • State Foundation for Employment Training (Fundae), for the purpose of managing employee training bonuses (contractual requirement).

6. Transfers of data to third countries

1. • The following data transfers to third countries are planned:

1. • • All About Games, Miro, Valve Corporation, Discord, Tyco Integrated Security, 10Web, for the purpose of digital communication channels, IT and marketing consulting, HR management, software developers, web hosting. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Google, for the purpose of hosting storage in Google Drive Cloud. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Mega Limited (New Zealand company number 4136598), for the purpose of hosting data storage in the cloud. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Microsoft, for the purpose of hosting Office 365 and One Drive storage. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

1. • • Missive, (190 rue Dorchester, studio 50.5, Quebec Quebec G1K 5Y9, Canada), for the purpose of hosting webmail from MISSIVE. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting the data controller.

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The data subject.

Processing of data for the exercise of data subject rights Basic information on data protection

• Responsible: THE GAME KITCHEN SL
• Purpose: Manage and respond to requests from data subjects exercising their rights established in data protection regulations.
• Legal basis: Compliance with a legal obligation.
• Recipients: Data transfers are planned to: Control authorities, public administration bodies, and the Ombudsman, where appropriate. Transfers to third countries are planned.
• Rights: You have the right to access, rectify, and delete data, as well as other rights indicated in the additional information, which you can exercise by contacting legal@aselio.es or C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla).
• Source: The data subject.

Complete information on data protection

1. Who is responsible for processing your data?

1. • THE GAME KITCHEN SL

1. • B91885707

1. • C/ Juan de Mariana 23, bajo – 41005 – SEVILLA

1. • 633102520

1. • fbarea@thegamekitchen.com

1.1. Contact details of the Data Protection Officer (DPO):

• ASELIO FORMACIÓN Y CONSULTORÍA S.L.
• C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla)
• legal@aselio.es

2. For what purpose do we process your personal data?

1. • At THE GAME KITCHEN SL, we process the information provided by interested parties to manage and respond to requests from data subjects exercising their rights established in data protection regulations. If you do not provide your personal data, we will not be able to fulfill the described purposes.

1. • No automated decisions will be made based on the provided data.

3. How long will we keep your data?

1. • The data will be kept for the time necessary to resolve the requests and at least for three years to address possible claims.

4. What is the legal basis for processing your data?

1. • We indicate the legal basis for processing your data:

1. • • Compliance with a legal obligation: Manage and respond to requests from data subjects exercising their rights established in data protection regulations (GDPR, art. 6.1.b).

5. To whom will your data be communicated?

1. • The data will be communicated to the following recipients:

1. • • Control authorities, public administration bodies, and the Ombudsman, where appropriate, for the purpose of managing and responding to requests and possible claims (legal requirement).

6. Transfers of data to third countries

1. • The following data transfers to third countries are planned:

1. • • Google, for the purpose of hosting data storage in Google Drive. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission.

1. • • Microsoft, for the purpose of hosting Office 365 and One Drive storage. The guarantee for this transfer has been established through: Existence of an adequacy decision by the Commission. You can find additional information at: https://cec.consumo.gob.es/CEC/comunicacion/noticias/docs/NI_PROTECCION_DATOS_16_08_2023.pdf.

7. What are your rights when you provide us with your data?

1. • Any person has the right to obtain confirmation as to whether THE GAME KITCHEN SL is processing personal data concerning them.

1. • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.

1. • In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

1. • In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, THE GAME KITCHEN SL will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

1. • You can exercise your rights in the following way: by contacting legal@aselio.es or C/ Juan Ramón Jiménez, nº 2, Blq. 14, 2º B, 41920 San Juan de Aznalfarache (Sevilla).

1. • When commercial communications are sent using the legitimate interest of the data controller as a legal basis, the interested party may object to the processing of their data for that purpose.

1. • If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

1. • If you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: www.aepd.es.

8. How did we obtain your data?

1. • The personal data we process at THE GAME KITCHEN SL come from: The data subject.